[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Security Strength Factor

"Kurt D. Zeilenga" <Kurt@OpenLDAP.org> writes:

> At 02:20 AM 12/18/2002, Dieter Kluenter wrote:
>>what is the precise definition of SSF, I know it "indicates a relative
>>strength of protection", but protection of what and protection by
> OpenLDAP has multiple SSFs.  For each session, there is
> one for SASL, one for TLS, etc., and an overall session
> SSF (the greatest SSF of any particular layer).
> SASL/EXTERNAL, itself, provides no security layers.  There
> may be protections provided by lower layers (like TLS) and,
> if so, these are reflected in SSF associated with the particular
> layer providing the protection as well as the overall SSF.

I understand from the above that a ssf value given in slapd.conf as
access control is not necessarily referring to SASL SSF, but may as
well refer to TLS SSF or what so ever , depending on the highest value
for a given session and it could be even a sum of two ore more


Dieter Kluenter  | Systemberatung
Tel:040.64861967 | Fax: 040.64891521
mailto: dkluenter@schevolution.com